HELP !!!!! How to protect Router automatic Mac generate

CCR-1016-12S-1S+RM
6.35.4
I have an issue with this zero arp entries. When someone scan or if you just ping address xxx.xxx.xxx.xxx
when it’s not on the net the arp table filled with 00:00:00:00:00:00 arp entry.
Then, when host is up router steel stuck with this dynamic entry and do not try to send new arp request
until you delete zero entry manually. It does not when you try to ping it from the other network.
If you delete this zero entry and then retry ping, router sends arp request and arp table filled with the correct entry.
ARP on the target bridge is set to “enabled”. Target network has an automatic route entry added with ip address xxx.xxx.xxx.xxx/24
in the main table and the static entries in other routing tables.
Updated to v6.39.2 (stable) today. Will see if it’s fixed.

This is not normal behavior. Probably during your “investigation” you have clicked on the entry and done “make static”.
Don’t do that. Just leave it operating and don’t worry about the 00:00:00:00:00:00 entries. They are not an issue,
they are normal behavior.